Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030613a3a2f34382d3438203d3e20323632373733.roa
File:                     323830343a3966383a343030613a3a2f34382d3438203d3e20323632373733.roa (raw, json)
Hash identifier:          0Zo/UwSbNXvMT9HMIAuqLZAYcNFxCF6+XsadVarHK3c=
Subject key identifier:   4B:19:63:9B:96:53:BC:58:53:F2:D1:26:8C:5D:8D:ED:9F:E8:8F:CB
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       498812B09D6A18686CBFA5518DE7285D18443C46
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030613a3a2f34382d3438203d3e20323632373733.roa
Signing time:             Tue 09 Aug 2022 13:20:09 +0000
ROA not before:           Tue 09 Aug 2022 13:15:09 +0000
ROA not after:            Tue 08 Aug 2023 13:20:09 +0000
asID:                     262773
IP address blocks:        2804:9f8:400a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:88:12:b0:9d:6a:18:68:6c:bf:a5:51:8d:e7:28:5d:18:44:3c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Aug  9 13:15:09 2022 GMT
            Not After : Aug  8 13:20:09 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:41:15:66:ae:17:8a:bc:56:b2:08:46:44:
                    13:c6:e3:05:3d:5e:49:4a:80:a9:ae:fe:32:e3:8c:
                    71:25:90:64:e3:31:8b:ca:80:0d:b0:63:09:00:a0:
                    25:14:74:d5:01:ed:51:92:91:ea:81:bf:1c:27:b7:
                    53:02:18:98:c4:5f:e0:9d:e3:c0:da:e8:24:cf:ee:
                    22:05:3f:03:15:69:c3:31:8f:22:cb:09:63:6f:d2:
                    73:89:26:51:21:7e:2e:99:fb:59:b6:11:5c:82:13:
                    ca:8e:92:36:09:2c:79:4f:c1:e5:37:f9:4e:df:ac:
                    ad:7f:7c:ed:5d:62:08:f2:40:9e:16:d2:30:25:df:
                    da:0c:67:4e:f3:0c:41:3c:05:1e:68:82:b3:26:9c:
                    7e:8e:f8:07:5d:32:bb:a8:e1:2d:ed:47:f0:37:4e:
                    7f:fb:26:42:12:46:88:1b:5c:6d:39:15:a1:11:f8:
                    84:db:60:0b:d5:f6:75:86:be:7d:d2:aa:6c:33:18:
                    3a:9a:42:b5:4e:81:ce:5a:16:94:6d:7b:02:2e:15:
                    3c:53:c0:5a:c6:5a:b1:a8:a8:a5:db:49:97:01:ba:
                    39:3e:82:ae:2f:49:2a:fc:0b:ef:26:5b:26:de:5a:
                    14:0e:ad:95:f3:04:28:07:0d:2e:23:84:48:6d:2d:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:19:63:9B:96:53:BC:58:53:F2:D1:26:8C:5D:8D:ED:9F:E8:8F:CB
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/323830343a3966383a343030613a3a2f34382d3438203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9f8:400a::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:98:e0:1c:81:a9:75:49:71:4d:e2:0f:14:45:0a:75:04:9f:
         38:9b:ad:86:33:97:f6:4f:d8:84:6e:6e:45:a8:b5:1a:b0:25:
         23:bc:36:d1:a6:9e:67:7e:c5:5f:84:8b:0e:8c:9f:a9:47:1d:
         f8:35:30:d2:72:ea:d9:a3:44:2a:2d:f5:d1:9e:22:3e:4d:30:
         22:a3:3a:fb:ad:76:71:4c:52:4a:18:be:9a:75:69:a2:19:d6:
         0e:30:b7:29:72:94:52:2d:d8:83:8e:09:39:86:26:a9:9b:d7:
         bc:20:a2:c1:1e:33:4f:62:a2:c6:e8:69:eb:31:30:5d:fb:ae:
         9f:7b:21:8b:f8:8f:f6:46:4d:fe:0d:2f:56:91:81:d5:1e:1b:
         7a:58:a9:7b:95:4a:d5:ce:4b:a3:c9:39:74:f4:8a:e5:d1:d9:
         f6:51:ab:33:90:ce:33:30:42:b9:56:68:e1:b7:df:d8:d2:2c:
         43:2b:3a:67:ae:38:6e:21:40:ce:ed:62:2b:41:3a:1c:ef:49:
         da:5d:ff:60:a7:8e:46:02:ea:16:2e:c2:48:6f:dd:65:6e:13:
         9d:ba:51:3f:e7:f7:9f:7d:35:a8:5d:5c:59:f3:5b:49:a6:7a:
         14:87:64:25:a4:9b:56:cd:d5:d3:2b:bf:e5:0a:68:f2:6e:e5:
         dc:a2:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----